GHSA-p332-fw36-4hqx

ghsaUSosv

Caucho Quercus, as distributed in Resin, does not properly handle unspecified characters in the names of variables

view advisory published 2022-05-17Licence: CC-BY-4.0

Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors, related to an "HTTP Parameter Contamination" issue.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2012-2965US	high7.5	1.62% (76th)	—	2012-08-12
Caucho Quercus, as distributed in Resin before 4.0.29, does not properly handle unspecified characters in the names of variables, which has unknown impact and remote attack vectors…

references

External citations — patches, advisories, analysis.

http://caucho.com/resin-4.0/changes/changes.xtpWEB
http://en.securitylab.ru/labWEB
http://www.kb.cert.org/vuls/id/309979WEB
https://nvd.nist.gov/vuln/detail/CVE-2012-2965ADVISORY
https://web.archive.org/web/20131210160901/http://en.securitylab.ru:80/lab/PT-2012-05WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan